Ok, so I answered my own question. In Epo, under System Tree, under Actions, Choose Columns, I selected State (System). Then I sort by response. Devices with State, Unknown are not encrypted.
Maybe there is a better way, if so, please share.
under reports, there's a drive check report if I remember correctly which will list the status of every drive on every machine.
Chapter 7 in this doc is probably more what you need - I found it on the KC by searching for EEPC 6 reports
Ok, thanks, related issue, The disk status or state shows "Inactive" but if I then click more details it shows the disk as encrypted. It's skewing the reports. There are a lot like this. 1/3 maybe.